CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

devel/sonar-scanner-cli6.2.1.4610_6

Scanner component of SonarQube

Maintainer
netchild@FreeBSD.org
Packages
sonar-scanner-cli 6.2.1.4610_6
Upstream
Higher version available: 8.2.0.6438
CPE
sonarsource:sonarqube_scanner from the port
WWW
https://www.sonarqube.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (30)

Ronald Klop (ronald) · 6.2.1.4610_6
*/*: bump portrevision after java_default=25 update

Included all ports that have USES=java.

PR:	293559
86813e9ccf
Ronald Klop (ronald) · 6.2.1.4610_5
*/*: bump portrevision after java_default=21 update

PR:	272855
2baaf16375
Po-Chuan Hsieh (sunpoet) · 6.2.1.4610_4
nodejs: Bump PORTREVISION for dependency change

USES=nodejs defaults to www/node24 now.
861a3e246e
Muhammad Moinur Rahman (bofh) · 6.2.1.4610_3
Mk/**java.mk: Convert bsd.java.mk to USES

The following features have been added or changed:
- Instead of USE_JAVA use USES=java. This defaults to
  USES=java:build,run if NO_BUILD is undefined. Else it defaults to
  USES=java:run
- Instead of USE_ANT=yes use USES=java:ant which also implies
  USES=java:build
- Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or
  extract
- Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply
  build or run
- Instead of JAVA_RUN=yes use USES=java:run does not imply extract or
  build
- Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version>

Approved by: mat (portmgr), glewis
Differential Revision:  https://reviews.freebsd.org/D48201
0835676e36
Po-Chuan Hsieh (sunpoet) · 6.2.1.4610_3
nodejs: Bump PORTREVISION for dependency change

USES=nodejs defaults to www/node22 now.
8bb58b5ee1
Alexander Leidinger (netchild) · 6.2.1.4610_2
devel/sonar-scanner-cli: Disable kubernetes scanning.

This throws an exception on FreeBSD (it doesn't respect the
sonar.scanner.os setting) and aborts the scan.
aff61c1df8
Alexander Leidinger (netchild) · 6.2.1.4610_1
devel/sonar-scanner-cli: Fix scanning on FreeBSD

- pretent to be linux (kubernetes files will still trigger an
  exception and abort the scan, as the kybernets part ignores
  the OS setting)
- prevent the download of java from the sonarqube server and
  use the local java
a9237f43dd
Alexander Leidinger (netchild) · 6.2.1.4610
devel/sonar-scanner-cli: Update to 6.2.1.
abcda10061
Alexander Leidinger (netchild) · 6.2.0.4584
devel/sonar-scanner-cli: Update to 6.2.0.
054362e3cf
Alexander Leidinger (netchild) · 6.1.0.4477
devel/sonar-scanner-cli: Update to 6.1.0.
4fd42b96e5
Alexander Leidinger (netchild) · 6.0.0.4432
devel/sonar-scanner-cli: Update to 6.0.0.
c1ae8045e3
Alexander Leidinger (netchild) · 5.0.1.3006
devel/sonar-scanner-cli: update to 5.0.1
ccb1538801
Po-Chuan Hsieh (sunpoet) · 4.4.0.2170_5
nodejs: Bump PORTREVISION for dependency change

USES=nodejs defaults to www/node20 now.
1ce58015ec
Alexander Leidinger (netchild) · 4.4.0.2170_4
devel/sonar-scanner-cli: Switch to openjdk 17+
83ef189901
Po-Chuan Hsieh (sunpoet) · 4.4.0.2170_3
Framework: Rewrite nodejs.mk and reorganize www/{node,npm,yarn}

The current USES=nodejs has the following issues:
- www/node is not the default version while www/node16 is.
- It also means inconsistent naming of node ports.
- www/npm duplicates with www/npm-node16.
- www/yarn duplicates with www/yarn-node16.

The notable changes are introduced to fix the above issues:
- Rewrite Mk/Uses/nodejs.mk.
- Add new LTS version of nodejs (www/noe18).
- Add new current version of nodejs (www/node19).
- Change default nodejs version from 16 to 18 (latest LTS).
- Use consistent naming for all supported node versions.
- Convert www/node, www/npm and www/yarn to meta ports.

After this commit:
- All supported node versions are named as node{14,16,18,19}
- www/node is a meta port which depends on the default version (e.g. www/node18)
- www/npm is a meta port which depends on the default version (e.g. www/npm-node18)
- www/yarn is a meta port which depends on the default version (e.g. www/yarn-node18)
- Bump PORTREVISION of dependent ports for dependency change (from www/node16 to www/node18)

Discussed with:	jrm, otis, pizzamig
fa93fdc383
Stefan Eßer (se) · 4.4.0.2170_2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 4.4.0.2170_2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Matthias Fechner (mfechner) · 4.4.0.2170_2
*/*: use new nodejs USES flag

Simply define which nodejs version is required using the nodejs USES flag.

PR:                     259783
Differential Revision:	https://reviews.freebsd.org/D32790
f4ffcdfe61
Alexander Leidinger (netchild) · 4.4.0.2170_1
devel/sonar-scanner-cli: fix CPE product
4d264d1ea0
Mathieu Arnold (mat) · 4.4.0.2170
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 4.4.0.2170
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 4.4.0.2170
Remove # $FreeBSD$ from Makefiles.
305f148f48
Alexander Leidinger (netchild) · 4.4.0.2170
Update to 4.4.0.2170.
7205442704
Alexander Leidinger (netchild) · 4.3.0.2102
Update sonarqube ports to the most revent version:  - sonarqube-community: 8.2  - sonarqube-ant-task: 2.7.0.1612  - sonar-scanner-cli: 4.3.0.2102
e60ff63988
Alexander Leidinger (netchild) · 2.8_1
Take over as maintainer.

Approved by:	maintainer
9b363d67ed
Jung-uk Kim (jkim) · 2.8_1
Clean up after java/openjdk6 and java/openjdk6-jre removal

java/openjdk6 support was removed from Mk/bsd.java.mk (r512662) and
java/openjdk6 and java/openjdk6-jre were removed from the ports tree
(r512663).  Now this patch completely removes remaining stuff from the
ports tree.

PR:			241953 (exp-run)
Reviewed by:		glewis
Approved by:		portmgr (antoine)
Differential Revision:	https://reviews.freebsd.org/D22342
5a52a08234
Antoine Brodin (antoine) · 2.8_1
Mark a few ports BROKEN, unfetchable
cc8ad7de9b
Mathieu Arnold (mat) · 2.8_1
Convert to UCL & cleanup pkg-message (categories d)
78d1aff1fc
Bradley T. Hughes (bhughes) · 2.8_1
devel/sonar-scanner-cli: Fix build as non-root

PR:             220115
Submitted by:   Du<C5><A1>an Vejnovi<C4><8D> <freebsd@dussan.org> (maintainer)
Approved by:    mat (co-mentor)
Differential Revision:  https://reviews.freebsd.org/D11438
f316d67ded
Palle Girgensohn (girgen) · 2.8
Add sonar-scanner-cli

The SonarQube Scanner is recommended as the default launcher to analyze a
project with SonarQube. The SonarQube Scanner allows you to perform source code
analyzes without using tools such as Ant or Maven. The SonarQube platform is an
open source quality management platform, dedicated to continuously analyzing
and measuring the technical quality of source code, from project portfolio down
to the method level. With the SonarQube Scanner, and also a tool like Jenkins,
everyone can analyze all kinds of languages, not just Java.

WWW:	http://docs.sonarqube.org/display/SCAN/Analyzing+with+SonarQube+Scanner
PR:	208667
eb16f76039